4a0e0d908448715b5ec6d41b260cde37_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a0e0d908448715b5ec6d41b260cde37_JaffaCakes118
Size

233KB
MD5

4a0e0d908448715b5ec6d41b260cde37
SHA1

c983771ebb0594783782e73f399c1108b54534fb
SHA256

14330508d42acd44148940dc97169b9498168acb0b7e7059050cd4edd58572b6
SHA512

2816c69b7b95741160849b2df75a141dc87280c83c9febaa2e9a7ef2b6b00ecf9e9fb0921cd4da12fce879dd73addcac0bd8a1ed4349e82a218b5ea9de34d5ca
SSDEEP

6144:V4u/+wlSvdqtOlj3yApSVvaGx+AuFJod+m3+msxjx6rGCVx4QP:V4SwROLD+AsJwfgxjx6rGuvP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a0e0d908448715b5ec6d41b260cde37_JaffaCakes118

Files

4a0e0d908448715b5ec6d41b260cde37_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

R:\TempView\Output\BinFinal\QQApp.pdb

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.pmj
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE